Security Settings: Two-Factor Authentication (2FA) and Password Recovery Email

Overview

Your account is already protected by security measures like strong passwords, login lockouts after failed attempts, and secure encryption. But you can add extra protection with two optional settings under Settings → My Security Settings:

• Two-Factor Authentication (2FA): Sends a code to your phone when you log in, so even if someone gets your password, they can't get into your account.
• Password Recovery Email: Lets you reset your password yourself if you forget it — no need to contact support.

Both settings are optional, but we strongly encourage turning them on. That way, if you ever need to reset your password, you can do it yourself right away without having to reach out to us.

Details

These options can be found under Settings > My Security Settings

Two-Factor Authentication (2FA)

One of the most effective things you can do to protect your account is to make sure that your staff enable Two-Factor Authentication (2FA) on your accounts. This dramatically improves the security of your logins, and makes sure that if someone does get your username and password, they'll still be unable to log in.

To get started, go to Settings My Security Settings and follow the prompts from here for Two Factor Authentication:

You'll be able to have your browser "remember" you so that you don't have to enter the code every time you log in unless it's from a new browser.

If you need to disable this for some reason in the future, just hover over your initials again and select Two Factor Authentication and it will allow you to remove this protection.

---

Password Recovery Email

In the event that a user forgets their password, they can reset this from the "Forgot Password" page of the main login screen of the EMR as long as they have both 2FA enabled and a Password Recovery Email setup. In order to reset their password, they would then need to verify a code sent to their recovery email, and then will also be required to enter a code sent to their 2FA mobile number to login with that new password for the first time.

In order to set up a Password Recovery Email, you must all set up 2FA.